Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: xD2Yt6CnWocIdgi0UO+Gc8qjdsGAXN08ItgkyjFfQp0=
Subject key identifier: 62:43:EA:64:55:37:F4:18:9A:0A:0D:F9:FF:4C:56:D5:0C:4C:5F:B9
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 019406EACFC96BCC56D68889C8B991C7AEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 04E6
Signing time: Fri 27 Dec 2024 07:00:39 +0000
Manifest this update: Fri 27 Dec 2024 07:00:39 +0000
Manifest next update: Sat 28 Dec 2024 07:00:39 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: lioJrWW6zsc3A/5H/OISraTOG2KCRw4YJAeCBWgtFug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:ea:cf:c9:6b:cc:56:d6:88:89:c8:b9:91:c7:ae:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Dec 27 07:00:39 2024 GMT
Not After : Dec 28 07:00:39 2024 GMT
Subject: CN=6243ea645537f4189a0a0df9ff4c56d50c4c5fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:af:f2:74:a1:45:e1:46:aa:3f:98:a1:b6:55:
cb:52:e6:3f:c2:73:67:68:c8:94:40:3f:17:8f:27:
ba:5b:9a:60:63:06:d5:48:bd:92:36:fb:9b:ea:c9:
c4:b0:8e:34:f8:e1:17:da:e7:21:60:bb:a0:28:6b:
e4:fc:3d:13:bb:f0:62:1a:fb:75:a9:e9:9e:bd:79:
3f:58:64:0c:b3:c8:10:ce:fc:65:fa:20:ef:24:19:
7c:5b:17:55:07:03:cc:fc:99:9e:5b:d6:b4:8e:db:
57:55:cb:b0:38:ce:03:30:cd:d6:3b:9e:16:6e:25:
22:75:b2:a8:36:0f:45:c9:1a:17:5b:29:76:a4:66:
0e:e3:b5:a3:7f:06:0d:f8:21:4b:ad:85:f9:e5:3c:
f4:79:ab:23:a8:3b:27:b6:73:92:94:74:7f:57:9d:
cd:85:a2:5a:f1:d3:53:22:25:63:df:db:51:30:6f:
bb:53:55:ba:29:32:1b:eb:eb:5b:d0:25:5a:df:79:
04:db:d7:63:20:60:61:6b:23:2a:c2:57:89:78:78:
37:34:2b:15:3c:4f:b7:f7:27:ac:cf:dd:4c:eb:b7:
cd:c3:3d:7f:c8:b8:0a:e6:5e:28:3f:33:aa:6f:16:
89:da:a9:56:58:00:eb:15:ab:c2:f2:0f:ed:63:61:
a5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:43:EA:64:55:37:F4:18:9A:0A:0D:F9:FF:4C:56:D5:0C:4C:5F:B9
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d4:63:f2:7c:91:87:d7:c3:25:11:b0:60:06:b4:98:dd:2e:
e4:b1:35:bd:02:15:fe:5b:47:f8:fe:6f:88:95:03:27:e2:90:
98:0b:dc:16:9b:b6:ee:89:55:8a:4f:cf:0d:08:93:84:16:77:
c3:5f:93:11:91:37:a4:5e:4a:3f:97:e6:5c:35:55:22:6b:cd:
7a:72:e3:0b:03:72:bd:b6:48:80:6a:95:b0:d3:48:ba:d0:2a:
7c:66:50:ab:cb:e6:9b:1d:33:48:ae:65:e9:11:04:cd:23:ba:
fd:13:43:78:05:c0:37:0d:30:7e:ee:94:33:85:d7:39:0c:99:
f0:e1:05:dc:ec:ba:d5:3e:62:c8:34:f8:fe:6c:ad:3a:e9:0b:
ad:fa:db:40:08:70:fe:24:37:d8:c7:f7:3c:f2:62:10:25:ff:
d5:e4:30:42:60:45:1f:e8:e9:ab:5a:68:4f:c6:ea:86:f9:e0:
ff:1b:08:da:ea:7f:ee:f7:f3:87:08:a2:e9:1a:85:7a:a2:cb:
5e:70:c6:df:31:7f:c6:51:81:73:fb:b9:f6:bc:8c:35:2f:ec:
cf:50:d6:f4:b9:07:62:83:a5:9d:ac:6b:cf:a9:6a:cf:06:4a:
58:b4:70:b3:08:70:29:33:07:0b:59:bf:55:84:4b:d3:46:e8:
05:e6:0d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:13:39 2024 by rpki-client on console-fra.rpki-client.org